What’s Vulnerable › Vulnerabilities

CVE-2017-2741

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 84.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-01-23 · updated 2026-06-17

Description

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute arbitrary code.

Affected products

• HP D3Q15A Firmware: before 1708d — fixed in 1708d
• HP D3Q15B Firmware: before 1708d — fixed in 1708d
• HP D3Q15D Firmware: before 1708d — fixed in 1708d
• HP D3Q16A Firmware: before 1708d — fixed in 1708d
• HP D3Q16B Firmware: before 1708d — fixed in 1708d
• HP D3Q16C Firmware: before 1708d — fixed in 1708d
• HP D3Q16D Firmware: before 1708d — fixed in 1708d
• HP D3Q17A Firmware: before 1708d — fixed in 1708d
• HP D3Q17C Firmware: before 1708d — fixed in 1708d
• HP D3Q17D Firmware: before 1708d — fixed in 1708d
• HP D3Q19A Firmware: before 1708d — fixed in 1708d
• HP D3Q19D Firmware: before 1708d — fixed in 1708d
• HP D3Q20A Firmware: before 1708d — fixed in 1708d
• HP D3Q20B Firmware: before 1708d — fixed in 1708d
• HP D3Q20C Firmware: before 1708d — fixed in 1708d
• HP D3Q20D Firmware: before 1708d — fixed in 1708d
• HP D3Q21A Firmware: before 1708d — fixed in 1708d
• HP D3Q21C Firmware: before 1708d — fixed in 1708d
• HP D3Q21D Firmware: before 1708d — fixed in 1708d
• HP D9L20A Firmware: before 1708d — fixed in 1708d
• HP D9L21A Firmware: before 1708d — fixed in 1708d
• HP D9L63A Firmware: before 1708d — fixed in 1708d
• HP D9L64A Firmware: before 1708d — fixed in 1708d
• HP J3P68A Firmware: before 1708d — fixed in 1708d
• HP J6U55A Firmware: before 1708d — fixed in 1708d
• HP J6U55B Firmware: before 1708d — fixed in 1708d
• HP J6U55C Firmware: before 1708d — fixed in 1708d
• HP J6U55D Firmware: before 1708d — fixed in 1708d
• HP J6U57B Firmware: before 1708d — fixed in 1708d
• HP J9V80A Firmware: before 1708d — fixed in 1708d

How to fix

Upgrade to a fixed version: HP D3Q15A Firmware 1708d; HP D3Q15B Firmware 1708d; HP D3Q15D Firmware 1708d; HP D3Q16A Firmware 1708d; HP D3Q16B Firmware 1708d; HP D3Q16C Firmware 1708d; HP D3Q16D Firmware 1708d; HP D3Q17A Firmware 1708d; HP D3Q17C Firmware 1708d; HP D3Q17D Firmware 1708d; HP D3Q19A Firmware 1708d; HP D3Q19D Firmware 1708d. Check the vendor advisory for mitigations.

References

• https://support.hp.com/us-en/document/c05462914
• https://www.exploit-db.com/exploits/42176/
• https://www.exploit-db.com/exploits/45273/
• https://support.hp.com/us-en/document/c05462914
• https://www.exploit-db.com/exploits/42176/
• https://www.exploit-db.com/exploits/45273/

Get alerted when CVE-2017-2741 or the next vulnerability affects your stack